$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a373a3a2f34382d3438203d3e203338333435.roa File: 323430313a386430303a373a3a2f34382d3438203d3e203338333435.roa (raw, json) Hash identifier: NWmp7E8deT1Xq0/s1AGiCHfrhVArGkMSHPf3uOI+SIw= Subject key identifier: C5:AB:53:B5:30:31:70:A1:58:34:76:74:69:1E:94:54:C8:0C:55:D6 Certificate issuer: /CN=A48290B7B4443542D0460FD49BDF1B444360AE86 Certificate serial: 532068784FCFB1671B1226CDF0BFB4E4D10AD751 Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a373a3a2f34382d3438203d3e203338333435.roa Signing time: Fri 10 Apr 2026 08:13:07 +0000 ROA not before: Fri 10 Apr 2026 08:08:07 +0000 ROA not after: Fri 09 Apr 2027 08:13:07 +0000 asID: 38345 IP address blocks: 2401:8d00:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:20:68:78:4f:cf:b1:67:1b:12:26:cd:f0:bf:b4:e4:d1:0a:d7:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86 Validity Not Before: Apr 10 08:08:07 2026 GMT Not After : Apr 9 08:13:07 2027 GMT Subject: CN=C5AB53B5303170A158347674691E9454C80C55D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:64:fd:76:73:8d:dd:ee:80:94:a8:33:a1:f4: b3:ba:84:10:e4:e3:36:da:1d:48:ff:24:92:a0:6f: 8d:58:29:39:27:e1:93:e1:2a:c2:6d:59:c9:a6:3c: cc:36:fd:b4:e9:cd:42:e4:47:1d:d9:32:20:a8:05: 1e:d8:63:b5:eb:d7:bf:80:cd:aa:90:af:b5:ad:45: 08:e1:66:7f:83:37:9f:f3:a3:10:04:46:87:3f:de: be:f4:54:6e:1c:2f:61:f8:8f:a5:6c:66:fe:8b:05: bb:f0:b4:e6:20:4a:27:f9:39:90:96:7e:01:9f:5f: 79:9b:1e:d0:fd:a5:46:f3:24:f9:73:35:93:9d:d5: 1e:26:46:ff:30:72:07:a8:1d:f6:e3:9f:1c:6a:ad: d6:6d:0c:66:b8:6f:08:21:93:f6:5b:65:dd:99:44: ee:20:30:27:22:59:96:00:2b:0d:fc:c4:bd:c8:11: 4b:c2:be:23:fb:97:89:48:72:02:3b:de:b0:bf:f4: 81:bb:9f:99:75:74:c6:ff:ce:ec:36:b4:6e:b2:a5: ef:34:2e:9e:62:19:df:fc:5f:e4:97:7d:eb:56:7a: ad:0b:9f:2b:43:07:63:c8:54:3a:7f:2a:27:aa:43: 45:d3:12:ec:ae:b3:7b:3a:2d:e8:2c:b2:49:6b:f9: b2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AB:53:B5:30:31:70:A1:58:34:76:74:69:1E:94:54:C8:0C:55:D6 X509v3 Authority Key Identifier: keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a373a3a2f34382d3438203d3e203338333435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:8d00:7::/48 Signature Algorithm: sha256WithRSAEncryption 04:56:d2:d6:9d:bd:60:0f:78:ac:97:7e:9c:7c:ae:ae:87:1e: cb:69:51:fe:50:9a:d6:9a:e8:bd:b7:ca:9d:8e:59:eb:5c:05: fc:b0:2a:ac:e7:5e:e8:41:ec:cb:30:62:d8:97:d8:f8:f8:97: 47:26:e0:63:6a:e7:2f:49:7d:c2:df:a1:29:85:9a:ad:bc:fe: 70:b0:f7:18:b2:3b:2f:3e:4b:4b:f1:c3:2e:94:26:e1:47:8f: 58:75:f3:7f:6c:4d:7e:54:33:bf:df:c8:0d:58:c9:f1:de:5e: 1b:34:33:44:ac:36:6b:f9:74:6f:f9:80:e4:b1:be:68:a5:cb: 34:fd:8d:13:fc:50:e9:f2:0d:40:08:12:22:32:0f:b5:16:3c: 9f:bc:ed:f9:10:46:31:63:b0:b6:16:2d:94:19:8a:48:2f:a4: 39:9f:cb:03:a5:3c:5d:bb:c3:e4:cf:4f:cf:93:84:cc:25:a2: 37:61:be:80:cb:5f:bc:86:77:f8:26:af:59:96:8d:e7:2b:fd: 98:d9:7d:bd:c0:64:be:72:36:ed:a4:49:ab:57:d7:bb:65:b7: 10:83:72:65:49:f4:16:af:e5:d4:3d:95:49:bc:bb:b2:8b:8a: d4:a1:db:cc:47:b9:09:46:d2:b9:40:4c:82:ac:19:80:24:85: 19:55:63:4b -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUUyBoeE/PsWcbEibN8L+05NEK11EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0 MzYwQUU4NjAeFw0yNjA0MTAwODA4MDdaFw0yNzA0MDkwODEzMDdaMDMxMTAvBgNV BAMTKEM1QUI1M0I1MzAzMTcwQTE1ODM0NzY3NDY5MUU5NDU0QzgwQzU1RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkZP12c43d7oCUqDOh9LO6hBDk 4zbaHUj/JJKgb41YKTkn4ZPhKsJtWcmmPMw2/bTpzULkRx3ZMiCoBR7YY7Xr17+A zaqQr7WtRQjhZn+DN5/zoxAERoc/3r70VG4cL2H4j6VsZv6LBbvwtOYgSif5OZCW fgGfX3mbHtD9pUbzJPlzNZOd1R4mRv8wcgeoHfbjnxxqrdZtDGa4bwghk/ZbZd2Z RO4gMCciWZYAKw38xL3IEUvCviP7l4lIcgI73rC/9IG7n5l1dMb/zuw2tG6ype80 Lp5iGd/8X+SXfetWeq0LnytDB2PIVDp/KieqQ0XTEuyus3s6Legssklr+bJBAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUxatTtTAxcKFYNHZ0aR6UVMgMVdYwHwYDVR0j BBgwFoAUpIKQt7RENULQRg/Um98bRENgroYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg4NDcyNzI1NDQ4Mjk0Ny8wL0E0ODI5MEI3QjQ0NDM1NDJEMDQ2MEZENDlCREYx QjQ0NDM2MEFFODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0MzYwQUU4Ni5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTQ4ODQ3MjcyNTQ0ODI5NDcvMC8zMjM0MzAzMTNh Mzg2NDMwMzAzYTM3M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzMzODMzMzQzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACQBjQAABzANBgkqhkiG9w0BAQsFAAOCAQEABFbS1p29YA94rJd+ nHyurocey2lR/lCa1provbfKnY5Z61wF/LAqrOde6EHsyzBi2JfY+PiXRybgY2rn L0l9wt+hKYWarbz+cLD3GLI7Lz5LS/HDLpQm4UePWHXzf2xNflQzv9/IDVjJ8d5e GzQzRKw2a/l0b/mA5LG+aKXLNP2NE/xQ6fINQAgSIjIPtRY8n7zt+RBGMWOwthYt lBmKSC+kOZ/LA6U8XbvD5M9Pz5OEzCWiN2G+gMtfvIZ3+CavWZaN5yv9mNl9vcBk vnI27aRJq1fXu2W3EINyZUn0Fq/l1D2VSby7souK1KHbzEe5CUbSuUBMgqwZgCSF GVVjSw== -----END CERTIFICATE-----Generated at Mon Apr 13 12:26:37 2026 by rpki-client